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Top Stories 

• A line of thunderstorms in southeastern Michigan cut power to approximately 92,000 DTE 
Energy customers August 2 and 63,000 customers remained without service August 3 
while crews worked to restore service by August 4. - Detroit News (See item 1) 

• Indiana Officials announced that an estimated 1.5 million State residents and 3.9 million 
individuals from 1 1 healthcare providers and 44 radiology clinics nationwide may have 
been impacted by a May breach of Medical Informatics Engineering and its subsidiary 
NoMoreClipboard’s networks. - Softpedia (See item 19 ) 

• Crews continued to work August 3 to contain at least 21 wildfires in California including 
the 54,000-acre Rocky Fire stretching across 3 counties that threatens over 12,100 
individuals and more than 5,100 structures. - CNN (See item 23 ) 

• Walmart, Sears, and Amazon agreed to pay the State of New York over $300,000 in 
penalties and halt sales of life-like toy guns August 3 after over 6,400 toy guns sold from 
2012-2014 violated New York laws. - Associated Press (See item 34 ) 
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Energy Sector 



1. August 3, Detroit News - (Michigan) Storms pummel state, produce tornado. A line 
of thunderstorms in southeastern Michigan cut power to approximately 92,000 DTE 
Energy customers August 2 and 63,000 customers remained without service August 3 
while crews worked to restore service by August 4. The storm caused flooding which 
prompted the closure of northbound Interstate 75 ramp at Interstate 94 in Detroit and 
the southbound Interstate 75 ramp to eastbound Interstate 94. 

Source: http://www.detroitnews.com/story/news/local/michigan/2015/08/02/metro- 
detroit-tomadoes-possible/3 1023811/ 

2. August 3, Dow Jones Business News - (Kentucky) Marathon Petroleum’s Kentucky 
refinery halts processing after power outage. Emergency personnel were working to 
restore power to the Marathon Petroleum Corporation’s refinery in Catlettsburg, 
Kentucky following the shutdown of all processing units due to a power outage at the 
facility August 2. 

Source: http://www.nasdaq.com/article/marathon-petroleums-kentuckv-refinery-halts- 
processing-after-power-outage-20150803-00709 

3. July 31, Burlington Free Press - (Vermont) VT Gas fined $100K for ‘failed’ 
transparency. The Vermont Public Service Board announced a $100,000 penalty to 
Vermont Gas Systems July 31 over allegations that the company failed to report 
projected natural gas pipeline cost increases within a State-required timeline. 

Source: http://www.burlingtonfreepress.com/storv/news/politics/2015/07/31/vt-gas- 
fined/30934191/ 

Chemical Industry Sector 

Nothing to report 

Nuclear Reactors, Materials, and Waste Sector 

Nothing to report 

Critical Manufacturing Sector 

4. July 31, U.S. Consumer Product Safety Commission - (National) NVIDIA recalls 
tablet computers due to fire hazard. NVIDIA issued a recall July 31 for about 83,000 
SHIELD tablet computers due to a lithium-ion battery issue that could cause the device 
to overheat, posing a fire hazard. The product was sold at GameStop stores nationwide 
and through various online retailers from July 2014 through July 2015. 

Source: http://www.cpsc.gov/en/Recalls/2015/NVIDIA-Recalls-Tablet-Computers/ 

5. July 31, Securityweek - (International) Flaw in fingerprint access devices could 
make it easy to open doors. Security researchers at CERT Coordination Center 
(CERT/CC) discovered two flaws in several models of fingerprint access controllers 
developed by Taiwan-based Chiyu Technology in which an unauthenticated attacker 
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with network access could view and modify the device’s configuration by accessing 
known paths. 

Source: http://www.securityweek.com/flaw-fingerprint-access-devices-could-rnake-it- 
easy-open-doors 

Defense Industrial Base Sector 

Nothing to report 

Financial Services Sector 

6. July 31, U.S. Securities and Exchange Commission - (International) SEC charges man 
with microcap fraud involving shares of Cynk Technology Corp. The U.S. 
Securities and Exchange Commission charged a Canadian man July 31 with allegedly 
using straw shareholders, foreign dummy corporations, and fake corporate officers 
worldwide to conceal his control of shares of Cynk Technology Corp., which he 
intended to liquidate when the stock’s price increased. 

Source: http://www.sec.gov/news/pressrelease/2015-157.html 

Transportation Systems Sector 

7. August 3, WNCN 17 Goldsboro - (North Carolina) Grandmother killed, 8 hurt when 
car and bus crash on 1-95 near Benson. The southbound lanes of Interstate 95 in 
Benson at mile marker 81 were shut down for almost 3 hours August 2 after a bus 
driver transporting 48 passengers fell asleep and slammed into a guardrail, killing 1 
person and injuring 8 others. 

Source: http://wncn.com/2015/08/02/fatal-wreck-shuts-down-i-95-south-near-benson/ 

8. August 1, KSL 102. 7 FM Midvale - (Utah) Tanker spills milk, starts fire in Weber 
Canyon rollover. Interstate 84 in Odgen was shut down for approximately 8 hours 
August 1 while crews responded to a small grass fire that started after a semi-truck 
hauling milk overturned. The driver of the truck was taken to the hospital for serious 
injuries and no other vehicles were involved in the crash. 

Source: 

http://www.ksl.com/?sid=35763572&nid=148&fm=most popular&s cid=popular-5 

9. August 1, KDVR 31 Denver - (Colorado) Motorcycle accident causes delays on EB I- 
70, hospitalizes three. Interstate 70 at the Hidden Valley exit east of Idaho Springs 
was shut down for several hours August 1 while officials investigated an accident that 
involved 2 motorcycles and injured 3 people. 

Source: http://kdvr.com/2015/08/01/motorcycle-accident-causes-delavs-on-eb-i-70- 
hospitalizes-3/ 

10. August 1, Yakima Herald-Republic - (Washington) SR 970 remains closed following 
fuel tanker crash and fire near Cle Elum. State Route 970 two miles east of Cle 
Elum was shut down for several hours August 1 while crews cleared the scene of a 
fiery crash that involved a semi-truck and a pick-up truck, leaving 2 people injured. 
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The cause of the crash remains unknown. 

Source: http://www.yakimaherald.com/news/local/sr-remains-closed-following-fuel- 
tanker-crash-and- fire-near/article dd97d854-3889-lle5-8fel-5733c4bla770.html 



For additional stories, see items 1 and 6 

Food and Agriculture Sector 

11. August 1, U.S. Food and Drug Administration - (National) The Kraft Heinz 
Company voluntarily recalls select varieties of Kraft Singles products due to 
potential choking hazard. The Kraft Heinz Company is voluntarily recalling select 
Kraft Singles individually- wrapped slices due to a film that may adhere to the cheese 
slice causing a choking hazard. The products were shipped to stores nationwide. 

Source: http://www.fda.gov/Safety/Recalls/ucm456883.htm 

12. July 31, U.S. Food and Drug Administration - (Pennsylvania) Allergy alert on 
undeclared milk in nutrition resource services, Inc.’s Whey, Casein, and 
Colostrum Protein Products. The U.S. Food and Drug Administration reported July 
30 that Nutrition Resource Services, Inc., of Bethlehem, Pennsylvania is voluntarily 
recalling products with whey concentrate, whey isolate, casein, and colostrum due to a 
milk allergen. The products were shipped to local showrooms, the Internet, and select 
local retail locations. 

Source: http://www.fda.gov/Safety/Recalls/ucm456836.htm 

13. July 31, U.S. Food and Drug Administration - (National) Whole Foods market recalls 
coconut curry cauliflower salad in twenty-one stores due to undeclared almonds. 
Whole Foods Market is recalling Coconut Curry Cauliflower Salad due to an 
undeclared almond allergen July 30. The product was shipped to 21 retail stores 
nationwide. 

Source: http://www.fda.gov/Safety/Recalls/ucm456869.htm 

14. July 31, U.S. Food and Drug Administration - (National) Kilwin’s Quality 
Confections, Inc. issues allergy alert on undeclared cashew in Sugar Free Milk 
Chocolate Caramels. Kilwin’s Quality Confections, Inc., of Petoskey, Michigan is 
voluntarily recalling 5-ounce containers of Sugar Free Milk Chocolate Caramels due to 
an undeclared cashew allergen July 31. The product was shipped to Kilwin’s stores 
nationwide. 

Source: http://www.fda.gov/Safety/Recalls/ucm456874.htm 

15. August 1, WDAZ 8 Grand Forks; WDAY 6 Fargo - (North Dakota) Production line 
catches fire at Grand Forks Simplot plant. The Simplot plant in Grand Forks, North 
Dakota sustained extensive damage August 1 after a fryer caught fire and spread to the 
roof of the building. Crews contained the incident and no injuries were reported. 

Source: http://www.wdav.com/news/north-dakota/3809331-update-production-line- 
catches-fire-grand-forks-simplot-plant 
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Water and Wastewater Systems Sector 



16. August 2, WCBS 2 New York City; Associated Press - (New Jersey) Coast Guard 
monitoring oil spill in Bayonne. Coast Guard crews are monitoring a spill at the 
International-Matex Tank Terminal in Bayonne after an unspecified amount of oil 
spilled into the water after a tugboat struck a pier August 1. The boaters and the public 
have been urged to stay away from the site. 

Source: http://newvork.cbslocal.com/2015/08/02/bavonne-oil-spill/ 

17. August 1, WLTX 19 Columbia - (South Carolina) Boil water advisory issued for West 
Columbia. The City West Columbia has issued a water advisory for water customers in 
West Columbia following a water man break August 1. Crews are working to repart the 
water lain and restore service. 

Source: http://www.wltx.com/story/news/2015/08/01/water-main-break-in-west- 
columbia/30998249/ 

18. August 1, Associated Press - (Washington) Kitsap sewage spill prompts warning to 
stay out of water. Health officials issued a water advisory August 1 to avoid contact 
with water in Dyes Inlet and the Part Washington Narrows on the Kitsap Peninsula 
after an estimated 40,000 gallons of sewage spilled near the Clear Creek Estuary when 
a contractor’s excavator bucket ruptured a sewer pipeline. Parks in the area were 
temporarily closed but have reopened. 

Source: http://www.khq.com/storv/29686273/kitsap-sewage-spill-prompts-waming-to- 
stay-out-of-water 

Healthcare and Public Health Sector 

19. August 3, Softpedia - (National) Data of 4 million patients lost in MIE hacking. The 
Indiana Attorney General announced that an estimated 1.5 million State residents and 
3.9 million individuals from 11 healthcare providers and 44 radiology clinics 
nationwide may have been impacted by a May breach of Medical Informatics 
Engineering and its subsidiary NoMoreClipboard’s networks. Officials continue to 
investigate the attack, which allowed hackers to gain access to patients’ personal and 
medical information. 

Source: http://news.softpedia.com/news/data-of-4-million-patients-lost-in-mie-hacking- 
488319.shtml 



20. August 3, Securityweek - (National) FDA issues alert over vulnerable Hospira drug 
pumps. Healthcare organizations were alerted by the U.S. Food and Drug 
Administration July 31 regarding cyber security risks associated with the use of 
Hospira Symbiq infusion systems following flaws discovered in 2014, which included 
security holes that can be remotely exploited by hackers in order to gain access to the 
devices and possibly change the dosage they deliver. The company has been working 
on developing a software update and the vendor is working to remove all of the 
infusion systems from the market until a permanent replacement is available. 

Source: http://www.securitvweek.com/fda-issues-alert-over-vulnerable-hospira-drug- 
pumps 
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21. August 1, Sioux City Journal - (South Dakota) Siouxland Pain Clinic says patient 
information likely exposed by hacker. The Siouxland Pain Clinic in Dakota Dunes 
reported July 31 that patients’ health and other personal information was likely exposed 
during an attack on the clinic’s server between March 26 and April 2, and that there 
was no evidence that the information was misused. The clinic continues to evaluate the 
attack after being notified of the breach June 26. 

Source: http://siouxcitvioumal.com/news/siouxland-pain-clinic-savs-patient- 
information-likely-exposed-by-hacker/article 45ef7201-98c4-5660-be8b- 
ad2f020c7009 . html 



22. July 31, Rapid City Journal - (South Dakota) Files of 1,100 veterans thrown in 
dumpster at Hot Springs VA. The U.S. Department of Veterans Affairs announced 
July 31 that a box containing the personal information of 1,100 military veterans was 
inadvertently thrown out into a dumpster at the Blacks Hills Health Care System 
campus in Hot Springs during an office move May 15. Officials stated that the files 
were retrieved and secured May 17. 

Source: http://rapidcitviournal.com/news/local/veterans-files-thrown-in-garbage-at-va- 
hot-springs-vets/article c53c039d-6795-541c-8033-d99b65dl48d7.html 

Government Facilities Sector 

23. August 3, CNN - (California) California wildfires torch 134,000 acres - and 
counting. Crews continued to work August 3 to contain at least 21 wildfires in 
California including the 54,000-acre Rocky Fire stretching across 3 counties that 
threatens over 12,100 individuals and more than 5,100 structures. The wildfires have 
collectively burned over 134,000 acres across the State, causing the governor to declare 
a state of emergency July 31. 

Source: http://www.cnn.com/2015/08/03/us/califomia-wildfires/ 

24. August 3, Eugene Register-Guard - (Oregon) Third forest fire - a small one - breaks 
out Douglas County as crews continue fight against Stouts and Cable Crossing 
fires. Crews reached 3 percent containment August 2 of the Stouts Fire that burned 
through 15,200 acres in the Canyonville area of Douglas County. Fire crews also 
reached 15 percent containment of the 1,148-acre Cable Crossing Fire burning near 
Roseburg. 

Source: http://registerguard.com/rg/news/local/33361197-75/story.csp 

25. August 2, Seattle Times - (Washington) Wildfire near Lake Chelan grows to more 
than 24 square miles. Crews worked to contain the Wolverine Fire after it burned 
through 15,760 acres in Chelan County August 1, prompting the evacuation of a retreat 
center and the closure of parts of the Pacific Crest Trail and a number of campgrounds. 
Source: http://www.seattletimes.com/seattle-news/central-washington-wildfire-grows- 
to-over-9- square-miles/ 

For another story, see item 22 
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Emergency Services Sector 



26. August 2, Associated Press; KATU 2 Portland - (Oregon) Police: Inmate breaks 
kitchen window, escapes prison. Authorities are searching for an inmate who escaped 
from the Columbia River Correctional Institution in Portland August 2 after guards 
discovered a broken window that the inmate allegedly used to escape. 

Source: http://www.kboi2.com/news/local/Police-Inmate-breaks-kitchen-window- 
escapes-prison-320438472.html 

27. July 31, Northwest Arkansas Democrat-Gazette - (Arkansas) Jefferson County jail 
inmates riot. Officials contained a riot involving a pod of 80 inmates at the Jefferson 
County Jail in Pine Bluff July 29 that caused over $20,000 in damage to the jail. 
Source: http://www.nwaonline.com/news/2015/iul/31/iefferson-county-iail-inmates- 
riot-2015/ 

For another story, see item 23 

Information Technology Sector 

28. August 3, Help Net Security - (International) Fake “Windows 10 Free Upgrade” 
emails deliver ransomware. Security researchers from Cisco’s Talos Group 
discovered a ransomware campaign in which attackers purporting to be from Microsoft 
send victims emails with a fake Windows 10 installer attached that is actually a variant 
of the CTB-Locker crypto-malware. 

Source: http://www.net-security.org/malware news.php?id=3082 

29. August 3, Softpedia - (International) Chrome extensions can be disabled without 
user interaction. Security experts from Detectify Labs discovered that an attacker 
could disable a list of Google Chrome security extensions upon visiting a site using the 
“ping” attribute inside a regular link, effectively removing safeguards without the 
user’s knowledge. Google Chrome was notified of the vulnerability and released a 
patch addressing the issue. 

Source: http://news.softpedia.com/news/chrome-extensions-can-be-disabled-without- 
user-interaction-488340.shtml 

30. August 3, IDG News Service - (International) DNS server attacks being using BIND 
software flaw. Security researchers from Sucuri reported that attackers have begun 
exploiting a denial-of-service (DoS) flaw in all versions of BIND 9 open-source 
Domain Name System (DNS) software that was patched the week of July 27. The 
company confirmed that two clients in different sectors had experienced attacks. 
Source: http://www.computerworld.com/article/2955290/security/dns-server-attacks- 
begin-using-bind-software-flaw.html 

31. August 3, Help Net Security - (International) The leading cause of insider threats? 
Employee negligence. The Ponemon Institute released findings from a survey on 
insider information technology (IT) threats in U.S. and German firms, revealing that in 
addition to malicious intent, employee negligence is a significant cause of security 
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incidents that lead to decreases in IT productivity, which can cause a company as much 
as $1.5 million in losses per year. The report cited long hours and multitasking as 
common elements leading to negligence, among other findings. 

Source: http://www.net-security.org/secworld.php?id=18697 

For additional stories, see items 5, 19, 20 and 21 

Internet Alert Dashboard 



To report cyber infrastructure incidents or to request information, please contact US-CERT at soc@us-cert.gov or 
visit their Web site: http://www.us-cert.gov 

Information on IT information sharing and analysis can be found at the IT ISAC (Information Sharing and 
Analysis Center) Web site: http://www.it-isac.org 



Communications Sector 

32. August 3, Brownsville Herald - (Texas) Jack FM burglar charged. An Alamo man 
was indicted July 31 on two counts of burglary charges after allegedly breaking into 
KJAV-FM, also known as “Jack FM” brand, and stealing and damaging radio 
equipment. Estimated theft and damage costs total over tens of thousands of dollars and 
forced the station to go offline for an unknown amount of time. 

Source: http://www.brownsvilleherald.com/news/valley/article lf7f4elc-3986-lle5- 
908a-eb 1 c06 1 82ed 1 .html 



For another story, see item 38 

Commercial Facilities Sector 

33. August 3, NBC News - (New Mexico) Two New Mexico churches rocked by 
explosions Sunday Morning. Two New Mexico churches remained closed August 3 
after back-to-back explosions were set off inside a mailbox at Calvary Baptist Church 
in Las Cruces and another in a trash can at Holy Cross Catholic Church, prompting an 
evacuation of the building August 2. A police investigation is ongoing to determine the 
cause of the incidents. 

Source: http://www.nbcnews.com/news/us-news/two-new-mexico-churches-blasted- 
explosions-sunday-morning-n402696 

34. August 3, Associated Press - (New York) Retailers to pay New York $300,000 in toy 
gun settlement. Walmart, Sears, and Amazon agreed to pay the State of New York 
over $300,000 in penalties and halt sales of life-like toy guns August 3 after over 6,400 
toy guns sold from 2012 - 2014 violated New York laws. 

Source: http://www.nvtimes.com/aponline/2015/08/03/us/ap-us-tov-guns- 
settlement.html? r=l 



35. August 3, WMUR 9 Manchester - (New Hampshire) Fire burns two apartment 

buildings and blows up car in Manchester. A 4- alarm fire at an apartment building in 
Manchester displaced 17 people and injured 4 firefighters August 2 after a discarded 
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cigarette sparked a porch fire that spread to a nearby building and surrounding units. 
Fire crews contained the incident and an investigation is ongoing to determine the 
cause. 

Source: http://www.wmur.com/news/crews-battling-rnultialarrn-fire-in- 
manchester/34494664 



36. August 3, WCVB 5 Boston - (Massachusetts) Fire destroys winery at historic 
Massachusetts farm. The Charlton Orchards Farm & Winery in Charlton, 
Massachusetts sustained extensive damage August 2 after a fire destroyed a barn 
housing all the winemaking equipment and 4,000 gallons of wine. No injuries were 
reported. 

Source: http://www.wcvb.com/news/fire-destory-winerv-at-historic-massachusetts- 
farm/34501876 



37. August 3, WWMT 3 Kalamazoo - (Michigan) 20 displaced after apartment fire in 
Kalamazoo. A Michigan State official reported August 3 that 20 residents were 
displaced after a Kalamazoo apartment fire prompted the evacuation of 7 adjoining 
units. The cause of the fire is unknown and an investigation is ongoing. 

Source: http://www.wwmt.com/news/features/top-stories/stories/20-displaced-after- 
apartment-fire-in-Kalamazoo-179594.shtml#.Vb-GbflVhBc 

38. August 3, Associated Press - (Illinois) One dead, thousands without power after 
storms. A Wood Dale, Illinois official reported August 3 that 1 person was killed and 
20 others injured at the annual Prairie Fest after a tent collapsed due to a sudden storm 
that brought high winds, hail, and rain, August 2. About 17,900 people were without 
power August 3, down from a peak of 95,000. 

Source: http://www.wbez.org/news/one-dead-thousands-without-power-after-storms- 
112537 



39. August 2, Milwaukee Journal Sentinel - (Wisconsin) Fire destroys 2 Waukesha 
dwellings, damages 2 others. An August 2 fire destroyed a Waukesha duplex and 
damaged two surrounding units after a wind-toppled barbeque grill began the blaze. No 
injuries were reported and fire crews remained on site approximately two hours 
extinguishing the flames. 

Source: http://www.isonline.com/news/waukesha/fire-destroys-2-waukesha-dwellings- 
damages-2-others-b99549273zl-320452922.html 

40. August 1, Bay News 9 St. Petersburg - (Florida) 15 hurt after pepper spray released 
inside JCPenney at Westfield Countryside. Clearwater fire officials reported August 
1 that 15 people were injured and 4 others sent to area hospitals after pepper spray was 
released inside or near an elevator shaft at JCPenney in the Westfield Countryside 
shopping mall. The chemical prompted a temporary evacuation of the mall while fire 
crews ventilated the area. 

Source: 

http://www.bavnews9.com/content/news/bavnews9/news/article.html/content/news/arti 
cles/bn9/20 15/8/1 /clearwater pepper sp.html 
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For another story, see item 23 

Dams Sector 



Nothing to report 



- 10 - 




NTAS 



NO ACTIVE ALERTS 
wwvv.DHS.gov/alerts 
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DHS Daily Open Source Infrastructure Report Contact Information 

About the reports - The DHS Daily Open Source Infrastructure Report is a daily [Monday 
through Friday] summary of open-source published information concerning significant critical 
infrastructure issues. The DHS Daily Open Source Infrastructure Report is archived for 10 days on 
the Department of Homeland Security Web site: http://www.dhs.gov/lPDailvReport 

Contact Information 

Content and Suggestions: Send mail to cikr.productfeedback@hq.dhs.gov or contact the DHS 

Daily Report Team at (703) 942-8590 

Subscribe to the Distribution List: Visit the DHS Daily Open Source Infrastructure Report and follow 

instructions to Get e-mail updates when this information changes . 

Removal from Distribution List: Send mail to support@govdelivery.com . 



Contact DHS 

To report physical infrastructure incidents or to request information, please contact the National Infrastructure 
Coordinating Center at nicc@hq.dhs.gov or (202) 282-9201. 

To report cyber infrastructure incidents or to request information, please contact US-CERT at soc@us-cert.gov or visit 
their Web page at www.us-cert.gov . 

Department of Homeland Security Disclaimer 

The DHS Daily Open Source Infrastructure Report is a non-commercial publication intended to educate and inform 
personnel engaged in infrastructure protection. Further reproduction or redistribution is subject to original copyright 
restrictions. DHS provides no warranty of ownership of the copyright, or accuracy with respect to the original source 
material. 
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